Privacy Policy
Effective date: 22 August 2026
Last updated: 23 September 2026
Gamifé is a focus timer that turns the time you concentrate into a café that grows. This policy explains exactly what the app stores, where it goes, and how to get rid of it.
It is written to be checked rather than trusted. Every claim below describes something the app actually does, and where a thing is worth being specific about, it is specific.
1. The short version
- The app works without an account. You are not asked to sign in to use it.
- We do not advertise to you and we do not track you. There is no advertising identifier and no cross-app or cross-site tracking of any kind.
- There is one optional exception to “we collect nothing extra”: product analytics, off unless you switch it on. It is offered only to adults, only after an explicit choice, and never to anyone under 18 or whose age cannot be established. Section 3.5 says exactly what it sends.
- Your café is backed up to our server from first launch, under an anonymous account with no email and no name attached. Signing in attaches an email address to that same backup so you can restore it on a new device.
- Alongside the backup we store a device identifier so the app knows which device wrote it last. That, your email address if you sign in, and the café itself are all we store about you.
- We never see your payment details. Subscriptions are handled entirely by Apple.
- Deleting your account deletes everything we hold, permanently.
2. Who we are
Gamifé is operated by Moses Giroth, an individual based in Surabaya, Indonesia (“we”, “us”).
For any question about this policy or about your data, contact privacy@gamifeapp.com.
3. What the app stores, and when
3.1 Before you sign in
On first launch the app creates an anonymous account so that your café has somewhere to be saved. This account contains no personal information — no email, no name, no contact details. It exists so that the app works offline and so that signing in later can keep the café you already built.
Everything you create lives on your device, and it is also mirrored to our server under that anonymous account, from the first launch onwards. This is what makes the café survive if you sign in later, or reinstall. Until you sign in, that backup is attached to a generated account id and nothing else — there is no email, no name and no way for us to connect it to you. Section 3.3 lists exactly what it contains.
3.2 If you sign in
Signing in is optional and exists for one reason: so your café survives losing your phone.
You can sign in with Google or with Apple. We receive from them:
| Data | Why |
|---|---|
| Your email address | To identify your account across devices |
| A user identifier | To link your café to your account |
If you use Sign in with Apple and choose Hide My Email, we only ever receive Apple’s private relay address. We do not attempt to resolve it to your real address.
We do not receive your Google or Apple password, contacts, calendar, photos, or any other data from your provider account.
3.3 Your café backup
The app mirrors your café to our server so it can be restored. This happens whether or not you have signed in — before you do, it is attached to the anonymous account from section 3.1. That backup contains:
- Your missions, including the names you type for them
- Your coins, savings, and savings goal
- Your focus session history — start times and durations
- Your rewards, including the names you type for custom rewards, and your inventory
- Your power-ups, reward timers, and streak history — and the time zone your streak days are counted in (for example “Asia/Jakarta”), so a day means the same day on every device you use
It does not contain any photo you attach to a custom reward. Reward images stay on the device that made them and are never uploaded, so they are not in the backup, not on our server, and not anywhere we could hand them over or be compelled to. You choose these one at a time from the iOS photo picker; the app never gets access to your photo library, only to the single image you hand it.
The trade-off is worth stating plainly, because it is yours to live with: if you reinstall Gamifé or sign in on a new phone, your reward artwork will not come back. Everything else in the list above does.
Alongside it we store a device identifier (Apple’s identifierForVendor) so the app can tell which device last wrote the backup. This identifier is provided by iOS, is specific to us as a developer, and is reset when you delete all of our apps from the device. It is not the advertising identifier and cannot be used to track you across other companies’ apps or websites.
3.4 Sign in with Apple only
If you sign in with Apple, we store a single refresh token from Apple. It has exactly one purpose: when you delete your account, we use it to tell Apple the sign-in is over, so Gamifé stops appearing under Settings › Apple Account › Sign in with Apple. It is never used for anything else and is deleted with your account.
3.5 Optional product analytics
This is off unless you turn it on, and most people will never be offered it.
If you are eligible for adult analytics and choose “Allow analytics,” Gamifé sends limited information about how you use the app to PostHog, our analytics provider. This includes screens visited, onboarding progress, focus-session activity and duration, reward interactions, and subscription purchase-flow outcomes.
Events include an opaque account identifier and limited app and technical identifiers — the app version, the build, and the analytics library’s version. This lets us understand journeys across devices where you separately enable analytics. These records are linked to your account and are not anonymous.
We do not send your mission titles, reward names, notes, photos, email address, payment-card information, or sign-in credentials to PostHog. We do not record your screen, and we do not use any of this for advertising or cross-app tracking.
PostHog processes analytics in the United States. We disable IP-address storage and location enrichment in our analytics configuration. Network infrastructure necessarily processes connection information in order to deliver a request at all.
When we ask, and what happens to the screens before it. The question is put during setup, on the screen after notifications — which means the first-run walkthrough itself happens before you have answered it. Those steps are recorded in your device’s memory only while the question is open. If you choose “Allow analytics,” they are sent along with everything after. If you choose “Continue without analytics,” they are destroyed and never sent. They are never written to storage, never leave the device before you answer, and do not survive closing the app — so quitting partway through setup discards them too. Turning analytics on later from Settings consents to being counted from then on; it does not go back and send a walkthrough you declined.
Who is offered it. Analytics stays off for anyone under 18, for anyone whose age range cannot be established, for anyone who declines to share one, and on iOS versions that have no way to provide one. We ask your device for an age range through Apple’s own age-assurance feature — we never ask for or receive your date of birth, and the age information used for this decision is never sent to PostHog.
Turning it off. Settings › Preferences › Product analytics, at any time, without losing access to any part of Gamifé. That stops future collection from that installation and clears anything not yet sent. It does not automatically erase information we have already received.
Deleting it. Deleting your account also begins deletion of its analytics. Account deletion and PostHog’s erasure run on different clocks and may finish at different times. You can also email privacy@gamifeapp.com for access or deletion requests, including ones that concern analytics only.
4. What we do not collect
To be explicit, because “we care about your privacy” is not information:
- No analytics unless you ask for it. No Firebase, no Amplitude, no Mixpanel, no attribution SDK. The app ships with three third-party components: Supabase (the backup), Google Sign-In (the sign-in button), and PostHog (the optional product analytics described in section 3.5, which sends nothing at all unless you have switched it on).
- No advertising, and no advertising identifier. We never ask for tracking permission because we have nothing to track you with.
- No location, contacts, microphone, camera, or health data. Nor your photo library: the only images the app ever holds are the ones you deliberately attach to a custom reward, and those never leave your device — see section 3.3.
- No push notifications, and therefore no device tokens. Reminders and reward countdowns are scheduled locally on your device and never leave it.
- No payment information. See section 6.
5. Where your data is held
Your account and backup are stored with Supabase, our hosting provider, on infrastructure located in the United States. If you use the app from outside the United States, your data is transferred there.
Access is restricted at the database level: the backup table’s security rules allow each account to read and write exactly one row — its own. The Apple token table is not readable by any client at all; only our server-side deletion function can reach it.
If you have switched on the optional analytics in section 3.5, those events are held with PostHog on infrastructure located in the United States, separately from your backup. If you use the app from outside the United States, both are transferred there.
6. Payments
Subscriptions are sold through Apple’s App Store. Apple handles the entire transaction. We never receive, see, or store your card number, billing address, or any other payment detail.
What the app knows is whether a valid subscription exists, which it reads from Apple’s StoreKit framework on your device.
Apple’s own privacy policy governs the payment itself.
7. How long we keep it
- Your backup is kept while your account exists, and is overwritten each time your café changes.
- Anonymous accounts that are never signed into may be removed after a period of inactivity.
- Analytics events, if you enabled them, are retained by PostHog under the retention policy of our plan. We would rather state this plainly than quote a number we cannot enforce: the retention period is PostHog’s to apply, not ours, and we do not control the moment data is physically removed. What we do control is deletion on request, below.
- Everything is deleted when you delete your account.
8. Deleting your data
Two different things, deliberately kept separate:
Logging out (Settings › Log out) clears the café from the device. Before it does, it confirms your backup is safely uploaded — and if that confirmation fails, the wipe is refused and your café is kept on the device. Signing back in restores it.
Deleting your account (Settings › Delete account) is permanent. It removes your account, your backup, and — if you signed in with Apple — revokes the token with Apple. There is no recovery.
You can also email privacy@gamifeapp.com and ask us to delete your account.
9. Your rights
Depending on where you live, you may have the right to access, correct, export, or delete the data we hold about you, and to object to or restrict its processing.
In practice: the data we hold is your email address, your café backup, and — only if you enabled it — the analytics events in section 3.5. The app already lets you delete all of them, and the analytics can be switched off on its own without touching anything else. For anything else, email privacy@gamifeapp.com and we will respond within 30 days.
If you are in the UK or EU, our lawful basis for holding your email and backup is performance of a contract — it is the feature you asked for by signing in. You may withdraw it at any time by deleting your account. For the optional analytics the lawful basis is your consent, which is why it is off until you give it and why withdrawing it in Settings takes effect immediately.
We do not sell personal information, and we do not share it for cross-context behavioural advertising.
10. Children
Gamifé is a general-audience app. It is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us personal information, email privacy@gamifeapp.com and we will delete it.
The optional analytics in section 3.5 is held to a higher bar than this section: it is offered only to people whose device reports an age range of 18 or over, and it stays off for everyone else, including everyone whose age we cannot establish. Turning analytics off changes nothing about the rest of this policy — the account, the backup and the sign-in described above work the same way for every user, at every age.
11. Security, honestly stated
Data is encrypted in transit. Access to the backup is limited per-account at the database level, as described in section 5.
No service can promise perfect security, and we will not pretend otherwise. What we can say is that the amount of personal data we hold is deliberately small — an email address and a record of how long you focused — because the least risky data is the data that was never collected.
12. Changes to this policy
If we change what the app collects, we will update this page and change the date at the top. If the change is significant, we will tell you in the app before it takes effect.
13. Contact
privacy@gamifeapp.com
Moses Giroth
Jl. Tidar No. 350
Surabaya 60173
Indonesia